M
Mortar/Legal
Back to site

Terms of Service

Last updated: 25 July 2026

These Terms of Service ("Terms") govern your access to and use of Mortar, provided under the name MortarSec by an individual operating as a sole proprietorship established in Poland ("Mortar", "MortarSec", "we", "us"). By creating an account, accessing the product, or signing an order form that references these Terms, you ("Customer", "you") agree to them. If you are agreeing on behalf of an organisation, you represent that you have authority to bind it.

If we have signed a separate written agreement or order form with you, that agreement governs and prevails over these Terms where they conflict.

1. The service

Mortar is a hosted access-governance product for Databricks Unity Catalog. It reads access metadata from the Databricks account(s) you connect and provides analysis, monitoring, review, certification, and - at your initiation - access-change execution. The specific features available depend on your plan.

We may improve, change, or discontinue features. We will not make a change that materially degrades the core service during a paid term without offering a remedy.

2. Your account and responsibilities

You are responsible for:

  • Keeping account credentials secure and enabling available protections (e.g. multi-factor authentication).
  • The acts of the users you invite, and for their compliance with these Terms.
  • Having the right and authorisation to connect the Databricks account(s) you connect, and to have Mortar process the access metadata in them.
  • Configuring Mortar appropriately for your environment. Mortar surfaces and, at your direction, changes access; you remain responsible for your access-governance decisions.

3. Acceptable use

You will not, and will not permit anyone to:

  • Use Mortar to access an estate you are not authorised to govern.
  • Reverse engineer, decompile, or attempt to extract source code, except to the extent this restriction is prohibited by law.
  • Probe, scan, or test the vulnerability of the service except under a security-testing authorisation we grant in writing (responsible-disclosure contact: security@mortarsec.com).
  • Resell, sublicense, or provide the service to a third party as a service bureau, except as expressly permitted.
  • Interfere with or disrupt the integrity or performance of the service, or attempt to circumvent tenant isolation, rate limits, or plan entitlements.

4. How Mortar changes your estate

Mortar's scanner reads your estate with read-only credentials. Any write to your Databricks estate (adding or removing a group member, revoking a grant) is executed under a human user's own identity - either your connected OAuth session or your own token - never under a shared god-mode service principal. Where an optional account-level executor is enabled by you, changes are attributed to the authorising human in your Databricks audit log. You are responsible for the access changes you approve and execute through Mortar. See Security & trust.

5. Plans, fees, and payment

Paid plans and any founding-customer pricing are as stated on your order form or at checkout. Unless otherwise agreed:

  • Fees are billed in advance for the subscription term and are non-refundable except as required by law or expressly stated.
  • We may adjust pricing for a renewal term with reasonable prior notice.
  • You are responsible for taxes other than our income taxes.
  • Non-payment may result in suspension after reasonable notice.

6. Data protection

Our processing of personal data is described in the Privacy Policy. Where we process personal data inside your Databricks estate on your behalf, we do so as your processor under the Data Processing Addendum, which is incorporated into these Terms.

7. Confidentiality

Each party may receive the other's confidential information. The receiving party will protect it with reasonable care, use it only to perform under these Terms, and not disclose it except to personnel and subprocessors who need it and are under confidentiality obligations. This does not apply to information that is public, independently developed, or rightfully obtained without confidentiality obligations.

8. Intellectual property

We and our licensors own the Mortar service, software, and documentation. We grant you a non-exclusive, non-transferable right to use the service during your term. You own your data and your estate; you grant us the limited right to process it to provide the service. Feedback you give us may be used without restriction.

9. Warranties and disclaimers

We will provide the service with reasonable skill and care. Except as expressly stated, the service is provided "as is" and we disclaim all other warranties to the maximum extent permitted by law, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Mortar analyses and reports on access; it is a governance aid and does not guarantee that your estate is free of misconfiguration or that any particular access is or is not appropriate. You remain responsible for your access decisions.

10. Limitation of liability

To the maximum extent permitted by law:

  • Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of or related to these Terms.
  • Each party's total aggregate liability arising out of or related to these Terms will not exceed the fees you paid or owed to us in the twelve (12) months before the event giving rise to the liability.

These limits do not apply to your payment obligations, either party's breach of the other's intellectual property, or liability that cannot be limited by law (including, where applicable, death or personal injury caused by negligence, fraud, or wilful misconduct).

11. Term and termination

These Terms apply while you have an account or an active subscription. Either party may terminate for the other's material breach not cured within 30 days of written notice. On termination, your right to use the service ends and we will delete your tenant data in line with the Privacy Policy and DPA. Sections that by their nature should survive (e.g. confidentiality, IP, liability, governing law) survive termination.

We may suspend the service immediately where necessary to protect the service or other customers, or where required by law, giving notice where practicable.

12. Indemnity

You will defend and indemnify us against third-party claims arising from your use of the service in breach of these Terms or from your lack of authority to connect an estate or process the data in it. Any indemnity we owe you, if agreed in an order form, is stated there.

13. Governing law and disputes

These Terms are governed by the laws of Poland, without regard to conflict-of-laws rules. The competent courts of Poland have exclusive jurisdiction, except that either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.

14. General

These Terms (with any order form, the Privacy Policy, and the DPA) are the entire agreement. We may update these Terms; material changes will be notified and, for a paid term, will not take effect retroactively. You may not assign these Terms without our consent; we may assign them to an affiliate or in connection with a merger or sale of assets. If any provision is unenforceable, the rest remains in effect. Failure to enforce a provision is not a waiver.

15. Contact

Questions about these Terms: hello@mortarsec.com.